System Admin eVotaré is in active development
beta launching soon
eVotaré

Secure, verifiable elections for boards, HOAs, and nonprofits.

eVotaré runs your board elections and member votes end to end — roll call, live results on the projector, and a cryptographic receipt every voter can verify independently.

Request beta access See pricing

See eVotaré in action

Real flows, drawn in motion — voting, board motions, dais roll call, invitations, in-room activation, and live results.

Built for verifiable, in-the-room elections

Tap any capability to see exactly how eVotaré supports it.

How it works

  • Every ballot becomes a leaf hash in the open vote-leaf-v1 format, and all leaves are committed to a SHA-256 Merkle tree at publish time.
  • Each voter gets a private nonce to look up their own leaf and a Merkle proof — confirming their ballot is in the published total without revealing how they voted.
  • Check it yourself: the public page recomputes the root right in your browser (nothing is sent back to us), and we publish an offline Python verifier that uses only the standard library.
  • Results publish immutably and versioned — re-publishing keeps every prior version, and the root is chained into an append-only audit log.
  • Ballot secrecy holds: receipts and verifiers never link a ballot to a voter, and secret-ballot items publish aggregate totals only.

How it works

  • Three separate ideas, on purpose: Positions (board offices up for election), Chairs (a fixed 1–99 number per voter for roll-call), and Grid slots (where each voter sits on the projector).
  • Run roll-call by chair number, and lay out the projector with a configurable Screen Layout — per session, or a saved tenant-wide default.
  • The projector updates live over server-sent events: each ballot recolors the grid and the yes / no / abstain tallies the instant it lands.
  • The display is fully branded — header title, colors, logo, background, a bottom banner, and an idle QR code.
  • Secret ballots stay secret on screen: live items show aggregate counts only, never per-voter choices.

How it works

  • Each organization runs in its own isolated database — not shared rows in a common table.
  • Branding is data-driven: your primary / accent / secondary / background / text colors, fonts, and corner radii render as CSS variables across every page and the projector.
  • Role-based access — owner › admin › operator › viewer — enforced on the server for every protected action.
  • Two-factor can be required for owners and admins; changing MFA or a password signs out other devices automatically.
  • Everything is written to a per-tenant audit trail — who changed what, and when.

How it works

  • Reach voters by email, SMS, and mobile push — ballot-ready alerts, reminders, results, and verification receipts.
  • SMS is strict opt-in (TCPA): a voter confirms a one-time code before any text is sent, and the consent and its timestamp are recorded.
  • Easy opt-out everywhere: reply STOP to texts or use one-click unsubscribe on emails (CAN-SPAM); bounces and spam-reports suppress automatically.
  • Sends run through a queued sender with retries and an audit trail — and no ballot contents ever ride in a message.
  • Use the shared platform sender, or bring your own SendGrid and Twilio credentials per organization.